See Protecting Applications for more information about protecting applications in Duo and additional application options. You'll need this information to complete your setup. Click Protect to the far-right to configure the application and get your integration key, secret key, and API hostname. Log in to the Duo Admin Panel and navigate to Applications.Ĭlick Protect an Application and locate the entry for macOS in the applications list. Read the enrollment documentation to learn more. We recommend using bulk enrollment or directory sync to send your users unique self-enrollment links via email. If the user logging in to macOS after the Duo plugin is installed does not exist in Duo, the user may not be able to log in. You can obtain a list of your Mac's local users with this Terminal command: dscl. The username should match your macOS logon name. Your users must be enrolled in Duo before logging in, and their Duo usernames must match the macOS username.Īdd your first user to Duo, either manually or using bulk enrollment. Enroll a Userĭuo's macOS authorization plugin doesn't support inline self-service enrollment. Installing Duo for macOS without first verifying that any other installed auth plugins support Swift 5 may prevent user logins. You can restore Duo after updating your operating system with the MacLogon-Restore-2.0.0.pkg package included in the Duo for macOS 2.0.0 zip file.įor additional client security, we recommend setting a firmware password to prevent disabling Duo authentication via recovery mode.īefore installing Duo for macOS, ensure any other login mechanisms present on your Mac client support Swift 5. Upgrading macOS versions may disable Duo's Mac Logon package. Consider updating to a newer version of macOS still supported by Apple. Note: Macos 13 (Ventura) testing currently in progress.Īs of Duo release 2.0.0, these macOS versions were not tested and may not work in the future. 11.0 (Big Sur) - first supported in 1.1.0.12.0 (Monterey) - first supported in 1.1.0.12.3 (Monterey) - First supported in 1.1.1.System Requirementsĭuo's Mac authorization plugin 2.0.0 supports macOS 10.15 (Catalina) and later versions, which includes: Once installed, Duo authentication is required for new console logons, but not when unlocking the screensaver or when an already logged-on user wakes the system from sleep. Looking for SSH login protection? Try Duo Unix. Duo for MacOS doesn't add 2FA for remote SSH connections. Be sure to read through these instructions before you download and install Duo for macOS.ĭuo Authentication for macOS add Duo two-factor authentication to macOS local console logins.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. Archives
January 2023
Categories |